$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: GkVqCduF50c4xWx5VFjsX01pk5hqBXZEeFRDj6CXH+o= Subject key identifier: EF:24:21:E3:7D:4C:45:95:EA:A6:36:BF:32:4B:AC:07:A7:06:7C:D1 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 1288741AD7E41BA0CC886E0B2E57DD8196EA6549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: 97 Signing time: Sat 12 Apr 2025 18:11:50 +0000 Manifest this update: Sat 12 Apr 2025 18:06:50 +0000 Manifest next update: Wed 16 Apr 2025 01:08:50 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: r11bFbW7+1qWXsgJZdWFcf19TSjFO3YW3IYTyoG2P7Q=) 2: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 3: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: +9aUVXVrakF3/6jXiUFt1IaoR/brdXNPYJwCjA4ETO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:88:74:1a:d7:e4:1b:a0:cc:88:6e:0b:2e:57:dd:81:96:ea:65:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Apr 12 18:06:50 2025 GMT Not After : Apr 16 01:08:50 2025 GMT Subject: CN=EF2421E37D4C4595EAA636BF324BAC07A7067CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:e5:7b:24:05:30:32:53:c2:38:49:53:e8: 1e:51:8a:53:99:a3:05:b6:c7:52:f4:e6:29:e0:fa: 25:85:d2:c3:cc:4a:8c:f2:f0:ab:1c:f2:c1:ab:eb: 5a:4d:41:5d:10:8d:a9:6d:e3:6e:ec:51:8e:40:da: fe:2a:12:a5:93:02:9b:3c:d2:44:b0:50:3f:a9:92: 29:64:20:b0:c0:ff:e2:25:d0:28:bc:87:4a:14:b1: f0:34:d3:67:e6:da:9d:ae:be:36:41:8c:91:af:25: 59:17:bf:06:d0:f8:61:e9:78:8e:c2:67:22:1f:c0: 35:82:c7:1b:ec:b0:ac:dd:08:6b:f8:aa:c6:a5:0e: af:c2:e3:03:61:f5:dd:d3:e8:a4:3b:5d:1b:ab:9e: aa:44:21:7e:52:d7:bf:71:41:91:5e:fd:31:cc:eb: 81:7d:3d:2b:f3:d0:bc:ee:df:6b:01:e1:89:60:a4: 37:6e:58:2c:4a:a7:13:12:b8:1e:b4:9c:17:66:12: da:4d:d9:97:eb:ab:c8:b1:10:97:f5:85:8f:8f:02: 0d:6c:ab:d2:61:b5:f7:c9:a4:d2:cd:b8:74:3b:bd: 26:75:9d:9d:3f:01:ad:36:fc:47:6e:b1:c6:62:1f: 1a:3f:59:bd:f5:19:40:bf:bf:e4:86:9f:2b:25:26: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:21:E3:7D:4C:45:95:EA:A6:36:BF:32:4B:AC:07:A7:06:7C:D1 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:0e:20:e7:ee:5d:4c:5d:fd:99:af:f2:b0:38:00:ab:1e:d6: fb:e6:5d:37:0c:00:07:75:a9:81:b5:4b:62:76:20:24:b3:f6: e1:71:5d:54:21:41:ad:c3:92:9e:68:75:50:21:2e:af:f5:fa: 47:b3:d0:b8:ab:0f:5c:54:20:c2:ee:14:66:cb:72:81:cf:2c: 65:68:8d:6f:fe:07:d3:5f:a2:80:bb:57:4a:ff:64:54:03:91: d0:08:40:f7:75:d0:37:c4:57:74:af:60:38:e3:a9:cb:39:b9: de:50:b7:8a:63:cd:9d:a1:75:a8:88:8f:1e:e4:4e:53:d2:09: 1d:a2:ab:b3:ea:8e:30:4d:18:dd:f3:e9:a2:f6:09:e9:76:8f: 73:20:17:7b:0f:70:cd:3e:18:4e:e3:db:01:50:33:75:14:39: c2:66:d6:03:81:59:ae:5c:c1:cd:05:d8:c5:e7:f7:2d:86:aa: 27:46:90:f2:20:b3:98:00:dc:32:ab:71:08:56:7f:75:fa:a1: fc:ce:25:81:32:88:00:06:34:cf:68:15:b2:14:12:5e:83:27: 81:b5:74:6b:4f:bc:69:cd:e5:48:05:34:f0:2e:b0:9c:89:f4: 99:0e:d2:a3:8b:62:a1:17:c6:ad:48:4b:fd:3c:00:2d:86:d8: d9:fd:12:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoh0GtfkG6DMiG4LLlfdgZbqZUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA0MTIxODA2NTBaFw0yNTA0MTYwMTA4NTBaMDMxMTAvBgNV BAMTKEVGMjQyMUUzN0Q0QzQ1OTVFQUE2MzZCRjMyNEJBQzA3QTcwNjdDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbuV7JAUwMlPCOElT6B5RilOZ owW2x1L05ing+iWF0sPMSozy8Ksc8sGr61pNQV0Qjalt427sUY5A2v4qEqWTAps8 0kSwUD+pkilkILDA/+Il0Ci8h0oUsfA002fm2p2uvjZBjJGvJVkXvwbQ+GHpeI7C ZyIfwDWCxxvssKzdCGv4qsalDq/C4wNh9d3T6KQ7XRurnqpEIX5S179xQZFe/THM 64F9PSvz0Lzu32sB4YlgpDduWCxKpxMSuB60nBdmEtpN2Zfrq8ixEJf1hY+PAg1s q9JhtffJpNLNuHQ7vSZ1nZ0/Aa02/EduscZiHxo/Wb31GUC/v+SGnyslJmJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7yQh431MRZXqpja/MkusB6cGfNEwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkOIOfuXUxd/Zmv8rA4AKse1vvmXTcMAAd1 qYG1S2J2ICSz9uFxXVQhQa3Dkp5odVAhLq/1+kez0LirD1xUIMLuFGbLcoHPLGVo jW/+B9NfooC7V0r/ZFQDkdAIQPd10DfEV3SvYDjjqcs5ud5Qt4pjzZ2hdaiIjx7k TlPSCR2iq7PqjjBNGN3z6aL2Cel2j3MgF3sPcM0+GE7j2wFQM3UUOcJm1gOBWa5c wc0F2MXn9y2GqidGkPIgs5gA3DKrcQhWf3X6ofzOJYEyiAAGNM9oFbIUEl6DJ4G1 dGtPvGnN5UgFNPAusJyJ9JkO0qOLYqEXxq1IS/08AC2G2Nn9Enc= -----END CERTIFICATE-----Generated at Sun Apr 13 17:09:31 2025 by rpki-client